Privacy & AI Governance Specialist (Hybrid Work Model)

Quorum Business Solutions, Inc.; Greater London; Hybrid; GBP 65,000 - 95,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Quorum Software, London, United Kingdom, seeks a Privacy & AI Governance Specialist to join our Information Security, Privacy & Compliance team. You will report to the Data Protection Officer and help mature our global privacy, data protection, and AI governance programs.

This role focuses on embedding privacy-by-design, collaborating with cross‑functional teams, and advancing DPIA/PIA, RoPA, data mapping, and vendor reviews.

Qualifications

• 3+ years in privacy, data protection, or related compliance roles.
• Working knowledge of GDPR/UK GDPR and global privacy regimes.
• Experience with DPIAs/PIAs, RoPA, data mapping, and vendor reviews.
• Familiarity with DPAs and SCCs, privacy/security contracting.
• Strong analytical, communication, and stakeholder management skills.
• Experience with GRC platforms is preferred.

Responsibilities

• Support design and improvement of global privacy, data protection, and AI governance programs.
• Maintain privacy docs: policies, templates, RoPA, data maps, DPIA/PIA materials.
• Advise stakeholders on privacy, cross-border transfers, and privacy-by-design.
• Conduct DPIAs, PIAs, TIAs, AI risk assessments, and privacy reviews.
• Review DPAs, SCCs, security schedules, and AI/data use provisions.
• Support vendor management, audits, and compliance reporting.
• Maintain inventories of processing activities, vendors, and data flows.
• Monitor regulatory developments and translate into actionable policies.
• Deliver training on privacy, AI governance, and information security.
• Collaborate with business units to embed privacy into products.
• Identify gaps and drive remediation and continuous improvement.
• Research emerging privacy and AI governance trends.

Skills

Privacy governance

Data protection

Regulatory compliance

Stakeholder management

DPIA/PIA experience

Education

Bachelor's degree in Law/Info Governance/Info Security/Compliance

Tools

OneTrust

Job description

Privacy & AI Governance Specialist (Hybrid Work Model)

QRR-4649

London, England, United Kingdom

Overview

We are currently seeking a Privacy & AI Governance Specialist to join our Information Security, Privacy & Compliance team. As a Privacy & AI Governance Specialist, you will report to our Data Protection Officer and support the continued maturity of Quorum's global privacy, data protection, and AI governance programs while helping the business navigate evolving regulatory requirements across multiple jurisdictions. You will collaborate with cross‑functional stakeholders to embed privacy‑by‑design and responsible AI practices into business processes, products, and services while supporting compliance, innovation, and operational excellence. You will also contribute to vendor management, customer assurance activities, and the continuous improvement of Quorum's governance framework.

Responsibilities

• Support the design, implementation, and continuous improvement of Quorum's global privacy, data protection, and AI governance programs.
• Maintain privacy documentation, including policies, procedures, templates, playbooks, Records of Processing Activities (RoPA), data maps, and DPIA/PIA materials.
• Advise internal stakeholders on privacy, data protection, vendor reviews, data subject rights, cross‑border data transfers, AI use cases, and privacy‑by‑design principles.
• Conduct and support Data Protection Impact Assessments (DPIAs), Privacy Impact Assessments (PIAs), Transfer Impact Assessments (TIAs), AI risk assessments, and privacy reviews for products, vendors, systems, and business initiatives.
• Review customer and vendor agreements, including Data Processing Agreements (DPAs), Standard Contractual Clauses (SCCs), security schedules, and AI/data use provisions.
• Support vendor management activities, customer audits, pre‑sales security questionnaires, compliance reporting, privacy incidents, and breach response activities.
• Maintain privacy and AI governance inventories, including data processing activities, vendors, AI tools, data flows, and associated risk assessments.
• Monitor global privacy, cybersecurity, and AI regulatory developments, translating legal and regulatory requirements into practical policies, standards, and operational processes.
• Deliver privacy, AI governance, and information security training and awareness initiatives across the organization.
• Collaborate closely with enterprise and business unit stakeholders to integrate privacy, data protection, and AI governance principles into products, services, and business operations.
• Identify, investigate, and help remediate compliance gaps and areas of risk to support ongoing regulatory compliance and continuous improvement.
• Proactively research and maintain a working knowledge of emerging privacy, AI governance, cybersecurity, and data protection laws, regulations, and industry best practices.
• And other duties as assigned.

Requirements

• Bachelor's degree or equivalent experience in Law, Information Governance, Information Security, Compliance, Risk Management, Business, Technology, or a related field.
• 3+ years of experience in privacy, data protection, compliance, information governance, legal operations, security risk, or a related discipline.
• Working knowledge of GDPR, UK GDPR, CCPA/CPRA, and other global privacy regulations.
• Experience conducting or supporting DPIAs/PIAs, maintaining Records of Processing Activities (RoPA), data mapping, vendor privacy reviews, data subject rights, privacy‑by‑design initiatives, and incident response activities.
• Familiarity with vendor management, risk management, customer audits, compliance reporting, and privacy/security contract reviews, including DPAs and SCCs.
• Previous experience with GRC, privacy, or compliance platforms (e.g., OneTrust or similar tools) is preferred.
• Strong analytical, research, documentation, communication, and stakeholder management skills.
• Excellent interpersonal, written, and verbal communication skills, including the ability to communicate complex regulatory concepts to technical and non‑technical audiences.
• Ability to manage multiple priorities in a fast‑paced, global environment.
• Critical‑thinking, problem‑solving, adaptability, and organizational skills.
• Interest in process improvement, workflow automation, GRC tools, and scalable compliance operations.

Preferred Skills

• Privacy certifications such as CIPP/E, CIPP/US, CIPM, CIPT, or equivalent.
• Familiarity with emerging AI governance frameworks and regulations, including the EU AI Act and industry best practices.
• Security or audit certifications such as CISSP, CISM, CISA, or equivalent.
• Familiarity with Information Security principles and IT governance processes.
• Experience supporting compliance assessments, internal or external audits, or regulatory reviews.
• Previous experience working within a SaaS, cloud technology, or global software organization.

Additional Details

• Visa Sponsorship: Employment eligibility to work with Quorum Software in the United Kingdom is required as the company will not pursue visa sponsorship for this position.

Quorum Diversity Statement

At Quorum, we are committed to fostering, cultivating, and preserving a culture of belonging. We want to be the place where a diverse pool of talented people join us, stay with us and do their best work. With a diverse team of employees, we grow and learn better together. The collective sum of the individual differences, life experiences, knowledge, innovation, self‑expression, and talent that our employees invest in their work represents not only part of our culture, but our reputation and our achievements. We are fully focused on equity and equality and believe deeply in diversity of race, gender, sexual orientation, age, religion, ethnicity, national origin, ability, neurodiversity and all the other characteristics that make us unique.

Quorum Business Solutions and Quorum Software are Equal Opportunity Employers. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, ancestry, veteran status, disability, genetic information, or any other basis protected by law.

Those applicants requiring reasonable accommodation to the application and/or interview process should notify a member of the Human Resources Department.